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1 1. Code that includes symbolic names and is executable in a program execution environment 

2 that resolves the symbolic names, the symbolic names including system symbolic names 

3 defined in tite execution environment and 

4 the code comprising: 

5 one or more obfuscated names that correspond to system symbolic names; 

6 a first association between the obfiiscated names and encrypted forms of the 

7 corresponding system symbolic names; and 

8 a static watermark that has been added to the code, 

9 the execution envuronment including a second association of the encrypted forms with 

10 information needed to resolve the corresponding system symbolic names, using the first and 

1 1 second associations to resolve the obfiiscated names, and using the static watermark to 

1 2 determine authenticity of the code. 

1 2. The code set forth in claim 1 wherein: 

2 the static watermark's value is a digest of the code prior to addition of the static 

3 watermark. 

1 3. The code set forth in claim Iwherein the code finther comprises: 

2 other obfiiscated names that replace names defined in source code firom which the code 

3 was made. 

1 4. The code set forth in claim 1 wherein: 

2 the code is downloaded to the program execution environment for execution. 

1 5. The code set forth in claim 1 , the code fiirther comprising; 

2 an encrypted first key, the first key having been used to produce the encrypted forms of 

3 the corresponding system symbolic names, 

4 the execution environment having access to a second key that can decrypt the first key; 

5 and 

6 the execution environment using the second key to decrypt the first key and the first 

7 key to make the encrypted forms in the second associationu 
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1 6. An improved class loader that loads a class in a program execution environment in a host 

2 computer system, the class being required for execution of a program in the program execution 

3 environment and the program including a first association between symbolic names in the 

4 program and encrypted forms of symbolic names defined in the class and the improved class 

5 loader being characterized in that: 

6 the improved class loader extends the class on execution of the program in the program 

7 execution environment by 

8 using the first association and a second association between the encrypted forms 

9 and information used to resolve the symbolic names defined in the class to resolve the 

10 symbolic names in the program, and 

1 1 adding a method to the program which determines whether the program has 

1 2 been modified by the host. 

1 7. The improved class loader set forth in claim 6 wherein: 

2 the method is encrypted prior to being added to the program; and 

3 the improved class loader decrypts the method on adding the method to the program. 

1 8. The improved class loader set fortii in claim 7 wherein: 

2 the program includes information firom which the method determines whether the 

3 program has been modified by the host. 

1 9. The improved class loader set forth in claim 6 wherein: 

2 the program includes a static watermark; and 

3 the static watermark is the information firom which the method determines whether the 

4 program has been modified by the host. 

1 10. The improved class loader set forth in claim 9 wherein: 

2 the static watermark's value is a digest of the program prior to addition of the static 

3 watermark. 

1 11, The improved class loader set forth in claim 9 wherein: 

2 The static watermark is at a location in the program that is determined by a key; and 

3 the method has access to the key and uses the key to locate the static watermark. 
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1 12. The improved class loader set forth in claim 6 wherein: 

2 the improved class loader has access to an encryption key that was used to produce the 

3 encrypted forms in the first association; and 

4 the improved class loader uses the encryption key to produce the second association on 

5 loading the class. 

1 13. The improved class loader set forth in claim 12 wherein: 

2 the program includes an encrypted form of the encryption key used to produce the 

3 second association; and 

4 the improved class loader obtains the encryption key by using a decryption key to 

5 decrypt the encrypted form of the encryption key. 

1 14. A method of protecting a program that is executed in a host computer system firom the 

2 host, the program being executed in a program execution environment that loads a class, the 

3 class being required for execution of the program in the program execution environment, and 

4 the program including a first association between symbolic names in the program and 

5 encrypted forms of symbolic names defined in the class, 

6 the method being characterized by the steps performed in the class loader of: 

7 making a second association between the encrypted forms and information used to 

8 resolve the symbolic names defined in the class, the first and second associations being used 

9 to resolve the symbolic names, and 

10 adding a method to the program which determines whether the program has been 

1 1 modified by the host. 

1 15. The method set forth in claim 14 wherein: 

2 the added method is encrypted; and 

3 the step of adding the method includes the step of decrypting the method. 

1 16. The method set forth in claim 14 wherein: 

2 the program includes information which the added method uses to detemiine whether 

3 the program has been modified by the host 
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1 17. The metiiod set forth m claim 14 wherein: 

2 the program includes a static watermark; and 

3 the static watermark is the information used by the added method to determine whether 

4 the program has been modified by the host. 

1 18. The method set forth in claim 17 wherein: 

2 the static watermark's value is a digest of the program prior to addition of the static 

3 watermark; and 

4 the added method reads the static watermark, recomputes the digest, and compares the 

5 recomputed digest with the watermark's value. 

1 19. The method set forth in claim 1 7 wherein: 

2 the added method uses a key to locate the static watOTnark in the program. 

1 20. The method set forth in claim 14 wherein: 

2 the class loader has access to an encryption key that was used to produce the encrypted 

3 forms in the first association; and 

4 the step of making a second association includes the steps of accessing the encryption 

5 key and using the encryption key to produce the encrypted forms. 

1 21. The method set forth in claim 20 wherein: 

2 the program includes an encrypted form of the encryption key that was used to produce 

3 the encrypted forms; and 

4 the step of accessing the encryption key includes the step of using a decryption key to 

5 decrypt the encrypted form of the encryption key. 

1 22. A method of protecting a program that is executed in a host computer system firom the 

2 host, the program being executed in a program execution environment that loads a class that is 

3 used in executing the program in the program execution environment and the method being 

4 characterized by: 

5 steps performed prior to executing the program in the program execution environment 

6 comprising 
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7 replacing symbolic names in the program that are defined in the class with 

8 obfuscated symbolic names corresponding thereto; and 

9 making a first association between the obfuscated symbolic names and 

10 encrypted forms of the replaced symbolic names; and 

11 steps performed on executing the program in the program execution environment 

12 comprising 

13 making a second association between the encrypted forms of the symbolic 

14 names and information required to resolve the symbolic names; 

15 adding a method to the program that determines whether the program has been 

1 6 modified by the host; 

17 using the first and second associations to resolve the obfuscated symbolic 

18 names; and 

19 executing the added method to determine whether the program has been 

20 modified by the host. 

1 23. The method of protecting the program set forth in claim 22 further characterized in that: 

2 the steps performed prior to executing the program further comprise the step of 

3 obfuscating other symbolic names that are not defined in the class. 

1 24. The method of protecting the program set forth in claim 22 further characterized in that: 

2 the method to be added is encrypted; and 

3 the step of adding the method includes the step of decrypting the method. 

1 25. The method of protecting the program set forth in claim 22 firrther characterized in that: 

2 the program includes information from which the method can determine whether the 

3 program has been modified by the host; and 

4 in the step of executing the added method, the added method uses the information to 

5 determine whether the program has been modified by the host. 

1 26. The method of protecting the program set forth in claim 25 further characterized in that: 

2 the steps performed prior to executing the program further comprise 

3 adding a static watermark to the program; and 

4 the static watermark is the information used by the added method. 
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1 27. The method of protecting the program set forth in claim 26 further characterized in that: 

2 in the step of adding the static watermark, the location of the static watermark in the 

3 program is determined by a key; and 

4 in the step of executing the added method, the added method uses the key to locate the 

5 watermark, 

1 28. The metiiod of protecting the program set forth in claim 22 further characterized in that: 

2 the step of making the second association includes the steps of 

3 obtaining a key used to make the encrypted forms in the first association and 

4 using the obtained key to make the encrypted forms in the second association. 

1 29. The method set forth in claim 28 further characterized in that: 

2 the program includes an encrypted form of the encryption key that was used to make 

3 the encrypted forms in the first association; and 

4 the step of obtaining the key includes the step of using a decryption key to decrypt the 

5 encrypted form of the encryption key. 
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